US5627967A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Automated generation on file access control system commands in a data processing system with front end processing of a master list
Assignee: International Business Machines Corp
•
Filing: 1995-05-30
•
Granted: 1997-05-06
•
Expires: 2015-05-30
Abstract
Abstract A front end is provided for an access controller for controlling access to a shared resource in a data processing system to contain a processed master list, in text form, of users to which access will be granted. The list of users may be edited by a simple editor or word processor. commands to the access controller are generated based upon a comparison of the processed master list and the edited master list. By storing access commands in the front end for the access controller, transparency of the access controller is provided to both users and the system authorization administrator.
Inventors
- 👤 Norman J. Dauerer
- 👤 Edward E. Kelley
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 19:15
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/604
Claims Analysis
Total Claims: 31
Claim 1
Independent Claim
207 words
A file access controller front end for an access controller of data processing system, said data processing system having a file access controller including a master file, said master file of said data processing system having a plurality of user/access lists, said file access controller front end being connected to said data processing system and including means for storing a processed master list of authorized users corresponding to data in said user/access lists of said master file of said data processing system, said processed master list being stored seperately from said master file in text form and identifying the authorized users to which said data processing system will grant access, means for detecting invalid and duplicate user/access authorizations in said processed master list, means for editing said text of said processed master list to form an edited master list with said invalid and duplicated user/access authorizations remove therefrom, and means for accessing said file access controller only subsequent to said editing of said text updating said user/access list of said file access controller of said data processing system and said processed master list in response to said edited master list to provide new user/access lists and new processed master list which conform to said edited master list.
Claim 2
Dependent Claim
207 words
A file access controller front end for an access controller of data processing system, said data processing system having a file access controller including a master file, said master file of said data processing system having a plurality of user/access lists, said file access controller front end being connected to said data processing system and including means for storing a processed master list of authorized users corresponding to data in said user/access lists of said master file of said data processing system, said processed master list being stored seperately from said master file in text form and identifying the authorized users to which said data processing system will grant access, means for detecting invalid and duplicate user/access authorizations in said processed master list, means for editing said text of said processed master list to form an edited master list with said invalid and duplicated user/access authorizations remove therefrom, and means for accessing said file access controller only subsequent to said editing of said text updating said user/access list of said file access controller of said data processing system and said processed master list in response to said edited master list to provide new user/access lists and new processed master list which conform to said edited master list.
Claim 3
Dependent Claim
51 words
An access controller front end as recited in claim 1, further including means for generating at least one new user/access list corresponding to said edited master list, and means for automatically generating commands for said access controller based on a comparison of a previous user/access list and said new user/access list.
Claim 4
Dependent Claim
68 words
An access controller front end as recited in claim 1, further including means for specifying and storing at least one alias file corresponding to an authorized user identification in at least one of said processed master list and said edited master list, and means for granting access to at least one file in said master file corresponding to said alias file in response to said authorized user identification.
Claim 5
Dependent Claim
79 words
An access controller front end as recited in claim 3, further including means for generating at least one new user/access list and at least one new alias file corresponding to at least one of said edited master list and said stored alias file, and means for automatically generating commands for said access controller based on a comparison of at least one previous user/access list with said new user/access list and said new alias file with said stored alias file.
Claim 6
Dependent Claim
184 words
A file access control system for a data processing system, said data processing system having at least a portion of a memory arranged as a plurality of mini-disks, each said mini-disk including a list of authorized users, said access control system including means for creating a master list of authorized users of said data processing system, means for creating a plurality of lists of authorized users for said plurality of mini-disks, at least one list of said plurality of lists corresponding to each mini-disk, from said master list, means for creating a processed master list from said plurality of lists of authorized users of said mini-disks, means for validating and editing said processed master list to form an edited master list, and means for accessing said file access controller only subsequent to said validating and editing of said text updating a list of authorized users of a mini-disk said data processing system and said processed master list in response to said edited master list to provide new lists of authorized users and a new processed master list which conform to said edited master list.
Claim 7
Dependent Claim
184 words
A file access control system for a data processing system, said data processing system having at least a portion of a memory arranged as a plurality of mini-disks, each said mini-disk including a list of authorized users, said access control system including means for creating a master list of authorized users of said data processing system, means for creating a plurality of lists of authorized users for said plurality of mini-disks, at least one list of said plurality of lists corresponding to each mini-disk, from said master list, means for creating a processed master list from said plurality of lists of authorized users of said mini-disks, means for validating and editing said processed master list to form an edited master list, and means for accessing said file access controller only subsequent to said validating and editing of said text updating a list of authorized users of a mini-disk said data processing system and said processed master list in response to said edited master list to provide new lists of authorized users and a new processed master list which conform to said edited master list.
Claim 8
Dependent Claim
21 words
A system as recited in claim 5, wherein said master list comprises a matrix of authorized user identifications and mini-disk identifications.
Claim 9
Independent Claim
152 words
A method of altering access authorization of a data processing system which includes a file access controller and at least a portion of memory arranged as a plurality of mini-disks, each said mini-disk including a list of authorized users, said method including the steps of validating and editing a master list of authorized users to form an edited master list, creating a processed master list of authorized users for at least one mini-disk from said edited master list, storing said list of authorized users for at least one mini-disk, and accessing said file access controller only subsequent to said validating and editing of said list of authorized users of a mini-disk of said data processing system and said creation of said processed master list in response to said edited master list to provide a new list of authorized users and a new processed master list which conform to said edited master list.
Claim 10
Independent Claim
152 words
A method of altering access authorization of a data processing system which includes a file access controller and at least a portion of memory arranged as a plurality of mini-disks, each said mini-disk including a list of authorized users, said method including the steps of validating and editing a master list of authorized users to form an edited master list, creating a processed master list of authorized users for at least one mini-disk from said edited master list, storing said list of authorized users for at least one mini-disk, and accessing said file access controller only subsequent to said validating and editing of said list of authorized users of a mini-disk of said data processing system and said creation of said processed master list in response to said edited master list to provide a new list of authorized users and a new processed master list which conform to said edited master list.
Claim 11
Dependent Claim
44 words
A method as recited in claim 7, wherein said step of storing said list of authorized users for at least one mini-disk is performed in response to a further step of entering a predetermined identification code at any terminal of said data processing system.
Claim 12
Dependent Claim
61 words
A method as recited in claim 7, wherein said step of storing said list of authorized users for at least one mini-disk includes a further step of comparing said list of authorized users for said at least one mini-disk with a previously stored list, and generating access authorization commands for granting or revoking access authorization is response to said comparing step.
Claim 13
Dependent Claim
28 words
A method as recited in claim 7, including the further step of generating a processed master list from said list of authorized users for at least one mini-disk.
Claim 14
Independent Claim
180 words
A method of file access control for a data processing system including a file access controller and a master file, said master file of said data processing system having plurality of user/access lists, including the steps of storing a processed master list of authorized users corresponding to data in said user/access lists of said data processing system, said processed master list being stored in said file access controller separately from said master file in text form and identifying the authorized users to which said data processing system will grant access, detecting invalid and duplicate user/access authorizations in said processed master list, editing said text of said processed master list to form an edited master list with said invalid and duplicate user/access authorizations removed therefrom, and accessing said file access controller only subsequent to said editing step, updating said user/access lists of said file access controller of said data processing system and said processed master list in response to said edited master list to provide new user/access lists and a new processed master list which conform to said edited master list.
Claim 15
Independent Claim
180 words
A method of file access control for a data processing system including a file access controller and a master file, said master file of said data processing system having plurality of user/access lists, including the steps of storing a processed master list of authorized users corresponding to data in said user/access lists of said data processing system, said processed master list being stored in said file access controller separately from said master file in text form and identifying the authorized users to which said data processing system will grant access, detecting invalid and duplicate user/access authorizations in said processed master list, editing said text of said processed master list to form an edited master list with said invalid and duplicate user/access authorizations removed therefrom, and accessing said file access controller only subsequent to said editing step, updating said user/access lists of said file access controller of said data processing system and said processed master list in response to said edited master list to provide new user/access lists and a new processed master list which conform to said edited master list.
Claim 16
Dependent Claim
47 words
A method as recited in claim 11, including the further steps of generating at least one new user/access list corresponding to said edited master list, and automatically generating commands for said access controller based on a comparison of a previous user/access list and said new user/access list.
Claim 17
Dependent Claim
64 words
A method as recited in claim 11, including the further steps of specifying and storing at least one alias file corresponding to an authorized user identification in at least one of said processed master list and said edited master list, and granting access to at least one file in said master file corresponding to said alias file in response to said authorized user identification.
Claim 18
Dependent Claim
75 words
A method as recited in claim 13, including the further steps of generating at least one new user/access list and at least one new alias file corresponding to at least one of said edited master list and said stored alias file, and automatically generating commands for said access controller based on a comparison of at least one previous user/access list with said new user/access list and said new alias file with said stored alias file.
Claim 19
Dependent Claim
31 words
A method as recited in claim 11, wherein said processed master list is stored at a primary system node, and said edited master list is stored at a remote system node.
Claim 20
Dependent Claim
23 words
A method as recited in claim 15, wherein said new user/access lists are compared with previous user/access lists at said remote system node.
Claim 21
Independent Claim
172 words
A method of access control for a data processing system, said data processing system having at least a portion of a memory arranged as a plurality of mini-disks and including a file access controller, said method including the steps of creating a master list of authorized users of said data processing system, creating a plurality of lists of authorized users for said plurality of mini-disks, at least one list of sad plurality of lists corresponding to each mini-disk, from said master list, creating a processed master list from said plurality of lists of authorized users of said mini-disks validating and editing said processed master list to form an edited master list, and accessing said file access controller only subsequent to said validating and editing of said list of authorized users of a mini-disk said data processing system and said creating of said processed master list in response to said edited master list to provide new lists of authorized users and a new processed master list which conform to said edited master list.
Claim 22
Independent Claim
172 words
A method of access control for a data processing system, said data processing system having at least a portion of a memory arranged as a plurality of mini-disks and including a file access controller, said method including the steps of creating a master list of authorized users of said data processing system, creating a plurality of lists of authorized users for said plurality of mini-disks, at least one list of sad plurality of lists corresponding to each mini-disk, from said master list, creating a processed master list from said plurality of lists of authorized users of said mini-disks validating and editing said processed master list to form an edited master list, and accessing said file access controller only subsequent to said validating and editing of said list of authorized users of a mini-disk said data processing system and said creating of said processed master list in response to said edited master list to provide new lists of authorized users and a new processed master list which conform to said edited master list.
Claim 23
Dependent Claim
21 words
A system as recited in claim 17, wherein said master list comprises a matrix of authorized user identifications and mini-disk identifications.
Claim 24
Dependent Claim
210 words
An access control system for a data processing system having at least a portion of a memory arranged as a master file, said master file of said data processing system having a plurality of mini-disks and a plurality of user/access lists corresponding to respective ones of the mini-disks, said access control system including means for storing a processed master list of authorized users corresponding to data in said user/access lists of said master file of said data processing system, said processed master list being stored separately from said master file in text form and identifying the authorized users to which said data processing system will grant access, means for detecting invalid and duplicate user/access authorizations in said processed master list, means for editing said text of said processed master list to form an edited master list with said invalid and duplicate user/access authorizations removed therefrom to form an edited master list, and means for accessing said file access controller only subsequent to editing of said text of said processed master list, updating said user/access lists of said data processing system and said processed master list in response to said edited master list to provide new user/access lists and a new processed master list which conform to said edited master list.
Claim 25
Dependent Claim
210 words
An access control system for a data processing system having at least a portion of a memory arranged as a master file, said master file of said data processing system having a plurality of mini-disks and a plurality of user/access lists corresponding to respective ones of the mini-disks, said access control system including means for storing a processed master list of authorized users corresponding to data in said user/access lists of said master file of said data processing system, said processed master list being stored separately from said master file in text form and identifying the authorized users to which said data processing system will grant access, means for detecting invalid and duplicate user/access authorizations in said processed master list, means for editing said text of said processed master list to form an edited master list with said invalid and duplicate user/access authorizations removed therefrom to form an edited master list, and means for accessing said file access controller only subsequent to editing of said text of said processed master list, updating said user/access lists of said data processing system and said processed master list in response to said edited master list to provide new user/access lists and a new processed master list which conform to said edited master list.
Claim 26
Dependent Claim
33 words
An access control system as recited in claim 19, wherein said processed master list is stored at a primary system node, and said edited master list is stored at a remote system node.
Claim 27
Dependent Claim
25 words
An access control system as recited in claim 20, wherein said new user/access lists are compared with previous user/access lists at said remote system node.
Claim 28
Independent Claim
198 words
A method of access control for a data processing system including a file access controller and at least a portion of a memory arranged as a master file, said master file of said data processing system having a plurality of mini-disks and a plurality of user/access lists corresponding to the mini-disks, including the steps of storing a processed master list of authorized users corresponding to data in said user/access lists of said master file of said data processing system, said processed master list being stored in said file access controller separately from said master file in text form and identifying the authorized users to which said data processing system will grant access, detecting invalid and duplicate user/access authorizations in said processed master list, editing said text of said processed master list to form an edited master list with said invalid and duplicate user/access authorizations removed therefrom, and accessing said file access controller only subsequent to editing of said text, updating said user/access lists of said data processing system and said processed master list in response to said edited master list to provide new user/access lists and a new processed master list which conform to said edited master list.
Claim 29
Independent Claim
198 words
A method of access control for a data processing system including a file access controller and at least a portion of a memory arranged as a master file, said master file of said data processing system having a plurality of mini-disks and a plurality of user/access lists corresponding to the mini-disks, including the steps of storing a processed master list of authorized users corresponding to data in said user/access lists of said master file of said data processing system, said processed master list being stored in said file access controller separately from said master file in text form and identifying the authorized users to which said data processing system will grant access, detecting invalid and duplicate user/access authorizations in said processed master list, editing said text of said processed master list to form an edited master list with said invalid and duplicate user/access authorizations removed therefrom, and accessing said file access controller only subsequent to editing of said text, updating said user/access lists of said data processing system and said processed master list in response to said edited master list to provide new user/access lists and a new processed master list which conform to said edited master list.
Claim 30
Dependent Claim
31 words
A method as recited in claim 22, wherein said processed master list is stored at a primary system node, and said edited master list is stored at a remote system node.
Claim 31
Dependent Claim
23 words
A method as recited in claim 23, wherein said new user/access lists are compared with previous user/access lists at said remote system node.
References Cited (Backward Citations)
US4104721A
Cited
US4621321A
Cited
US4672572A
Cited
US4959774A
Cited
US4800590A
Cited
US4713753A
Cited
US4817050A
Cited
US4821175A
Cited
US4951249A
Cited
US4827423A
Cited
US4958273A
Cited
US4888681A
Cited
US4891503A
Cited
US4891785A
Cited
US4984272A
Cited
US5230070A
Cited
US5228136A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-05-05 | 2000-11-04 | 2001-05-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-05-05 | 2004-11-04 | 2005-05-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-05-05 | 2008-11-04 | 2009-05-06 | $7700.00 | Window Closed / Lapsed |